Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248AF0805F5611EC903F827C5A40D577.roa
File: 248AF0805F5611EC903F827C5A40D577.roa (raw, json)
Hash identifier: AGuOrpF3NxXbuSB3LxFon86HtcEWyUTGOHyEJiG7CvA=
Subject key identifier: D4:59:9F:E1:77:94:56:5C:1F:B6:67:AC:CF:A5:1C:DF:C9:AC:87:33
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 073A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248AF0805F5611EC903F827C5A40D577.roa
Signing time: Fri 17 Dec 2021 16:26:53 +0000
ROA not before: Fri 17 Dec 2021 16:26:48 +0000
ROA not after: Sat 17 Dec 2022 16:26:48 +0000
asID: 174
IP address blocks: 154.16.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 17 16:26:48 2021 GMT
Not After : Dec 17 16:26:48 2022 GMT
Subject: CN=61bcba4d-5a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:7f:fc:44:a5:e1:0c:f1:7b:72:e8:6a:2c:
41:42:fc:d3:df:7b:73:47:21:49:6e:fd:54:7b:af:
e5:f6:45:0d:ad:74:87:d2:da:a6:a3:75:c9:06:03:
3b:c2:19:92:b5:59:98:8e:48:3c:8f:c9:bd:67:5e:
7c:a1:f5:51:a3:3d:2d:39:61:ee:66:b3:5c:63:05:
1a:f3:f7:fd:02:b9:89:53:0b:d0:00:15:37:f3:9a:
90:8b:54:67:9b:6f:10:bd:ab:1c:45:18:f5:56:71:
f3:e6:f5:94:d3:9d:bd:2c:ac:d7:3f:a5:dd:e0:11:
0d:1c:c2:07:72:65:91:e1:ab:0b:64:07:0c:3c:b4:
58:ba:29:a0:c0:cb:2b:70:fc:8d:3d:e6:92:89:91:
5d:e5:8e:df:92:19:3f:d0:1e:34:c0:d8:3d:01:bd:
fa:d8:7c:97:ac:90:04:23:26:18:d8:6b:05:2f:dd:
5d:d3:22:8c:80:79:a7:30:ce:e8:7a:95:02:54:1d:
8c:9a:93:55:a3:41:b0:5e:7d:da:a1:d8:b0:17:02:
91:09:b9:68:ab:dc:94:78:50:e5:cd:1f:ed:e4:c7:
d7:75:3a:71:e8:80:32:de:47:09:5b:59:5b:da:5f:
d9:39:85:ce:ce:33:6b:12:12:a9:1f:4f:7d:01:5a:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:9F:E1:77:94:56:5C:1F:B6:67:AC:CF:A5:1C:DF:C9:AC:87:33
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248AF0805F5611EC903F827C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.95.0/24
Signature Algorithm: sha256WithRSAEncryption
74:10:50:8e:dd:99:78:2c:e1:60:db:ea:0a:a4:9f:b6:76:fd:
39:81:1d:ab:2b:b2:5f:2a:21:34:e1:1f:0e:c2:e3:cf:b8:a9:
ac:1a:7d:a1:e7:92:23:90:d6:ec:a3:f0:24:10:e0:40:bc:ea:
82:b0:b5:7b:88:c3:5c:02:82:bd:a1:9b:7f:ef:ac:80:8e:e3:
d8:12:af:6d:a3:72:ee:57:1c:89:7b:c5:cf:bd:0c:fb:4f:52:
a4:ef:3e:cc:74:0a:49:b8:19:b8:20:85:bd:ec:a6:0d:a5:f8:
bb:51:ff:05:2d:9a:bf:8c:ae:23:0d:2d:e5:9b:2e:a6:24:cd:
70:8c:59:79:f1:18:27:30:34:97:05:3e:19:f6:56:fa:72:69:
f9:d3:ac:56:12:aa:3d:40:36:14:2d:bb:fb:88:62:09:84:5f:
62:11:31:33:f0:70:b1:a4:7c:ef:a4:1c:1b:57:0a:9f:22:2c:
ef:20:93:7b:9e:86:07:34:29:1e:4b:81:68:47:72:04:32:17:
dc:b9:b9:49:f6:49:f7:bc:b2:81:8b:af:6b:c6:85:c1:bd:f9:
0f:ba:63:2b:36:d4:75:93:28:7e:4d:99:88:9f:36:28:b0:bd:
5c:60:b2:a4:5a:08:99:f9:e4:8e:56:e8:45:cb:0f:1c:47:9f:
1a:b2:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org